5 Commits

Author SHA256 Message Date
d9c3644924 - CVE-2023-44487.patch: nghttp2 Security Release (CVE-2023-44487, bsc#1216190)
- nodejs.keyring: include new releaser keys
- newicu_test_fixup.patch: workaround whitespaces funnies in
  some icu versions

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=187
2023-10-25 11:18:21 +00:00
11443c2973 - CVE-2022-35256.patch: update llhttp to 2.1.6
+ fixes CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + fixes incorrect parsing of header fields (CVE-2022-35256, bsc#1203832)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=182
2022-09-29 12:47:30 +00:00
7c8c76a6cf OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=164 2021-07-22 13:35:54 +00:00
f8a9c947c2 Keyring update
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=14
2018-06-22 14:30:57 +00:00
20a701d2db - New upstream release 10.1.0:
* console: make console.table() use colored inspect
  * fs: move fs/promises to fs.promises
  * http: added aborted property to request
  * n-api: initialize a module via a special symbol
  * src: add public API to expose the main V8 Platform
- Changes in version 10.0.0:
  * Assert:
    + Calling assert.fail() with more than one argument is deprecated.
    + Calling assert.ok() with no arguments will now throw.
    + Calling assert.ifError() will now throw with any argument
      other than undefined or null. Previously the method would throw
      with any truthy value.
  * Async_hooks:
    + Older experimental async_hooks APIs have been removed.
  * Buffer:
    + Uses of new Buffer() and Buffer() outside of the node_modules
      directory will now emit a runtime deprecation warning.
    + Buffer.isEncoding() now returns undefined for falsy values,
      including an empty string.
    + Buffer.fill() will throw if an attempt is made to fill with
      an empty Buffer.
  * Child Process: Undefined properties of env are ignored.
  * console: console.table() method has been added.
  * crypto:
    + The crypto.createCipher() and crypto.createDecipher() methods
      have been deprecated. Please use crypto.createCipheriv() and
      crypto.createDecipheriv() instead.
    + The decipher.finaltol() method has been deprecated.
    + The crypto.DEFAULT_ENCODING property has been deprecated.
    + The ECDH.convertKey() method has been added.
    + The crypto.fips property has been deprecated.
  * deps:
    + V8 has been updated to 6.6
    + npm upgraded to 5.8.0
  * EventEmitter:
    + The EventEmitter.prototype.off() method has been added as
      an alias for EventEmitter.prototype.removeListener().
  * File System:
    + The fs/promises API provides experimental promisified
      versions of the fs functions.
    + Invalid path errors are now thrown synchronously.
    + fs.readFile() method now partitions reads to avoid thread
      pool exhaustion.
  * http:
    + Processing of HTTP Status codes 100, 102-199 has been improved.
    + Multi-byte characters in URL paths are now forbidden.
  * N-API: The n-api is no longer experimental.
  * net: The 'close' event will be emitted after 'end'.
  * perf_hooks:
    + The PerformanceObserver class is now an AsyncResource and can
      be monitored using async_hooks.
    + Trace events are now emitted for performance events.
    + The performance API has been simplified.
    + Performance milestone marks will be emitted as trace events.
  * process:
    + Using non-string values for process.env is deprecated.
    + The process.assert() method is deprecated.
  * repl:
    + REPL now experimentally supports top-level await when using
      the --experimental-repl-await flag.
    + The previously deprecated "magic mode" has been removed.
    + The previously deprecated NODE_REPL_HISTORY_FILE environment
      variable has been removed.
    + Proxy objects are shown as Proxy objects when inspected.
  * streams:
    + The 'readable' event is now always deferred with nextTick.
    + A new pipeline() method has been provided for building
      end-to-data stream pipelines.
    + support for async for-await has been added to stream.Readable
  * timers: The enroll() and unenroll() methods have been deprecated
  * tls:
    + The tls.convertNPNProtocols() method has been deprecated.
    + Support for NPN (next protocol negotiation) has been dropped.
    + The ecdhCurve default is now 'auto'.
  * Trace Events:
    + A new trace_events top-level module allows trace event
      categories to be enabled/disabled at runtime.
  * URL: The WHATWG URL API is now a global.
  * Util:
    + util.types.is[…] type checks have been added.
    + Support for bigint formatting has been added to util.inspect().

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=1
2018-05-11 14:21:06 +00:00